Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58F605DDA863EA0C5B2FD9640006BAD418E898C6BB64F62C2DF6F7A2BAE69C58/0/323830333a356265303a3130303a3a2f34302d3430203d3e20323731393033.roa
File:                     323830333a356265303a3130303a3a2f34302d3430203d3e20323731393033.roa (raw, json)
Hash identifier:          cg15fvl9nRqGMrV1gUzit5YXOIriVNpnXOfIomSQOKU=
Subject key identifier:   25:E3:F7:C3:22:32:85:90:35:1B:62:B6:78:B8:61:EC:0B:CA:FB:7B
Certificate issuer:       /CN=1EA7572730570E0D627708051828C84C8111A53E
Certificate serial:       5EA3650C55B9A720CA43F8A0349FFF38596EB805
Authority key identifier: 1E:A7:57:27:30:57:0E:0D:62:77:08:05:18:28:C8:4C:81:11:A5:3E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1EA7572730570E0D627708051828C84C8111A53E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/58F605DDA863EA0C5B2FD9640006BAD418E898C6BB64F62C2DF6F7A2BAE69C58/0/323830333a356265303a3130303a3a2f34302d3430203d3e20323731393033.roa
Signing time:             Tue 05 Mar 2024 17:46:16 +0000
ROA not before:           Tue 05 Mar 2024 17:41:16 +0000
ROA not after:            Tue 04 Mar 2025 17:46:16 +0000
asID:                     271903
IP address blocks:        2803:5be0:100::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/58F605DDA863EA0C5B2FD9640006BAD418E898C6BB64F62C2DF6F7A2BAE69C58/0/1EA7572730570E0D627708051828C84C8111A53E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/58F605DDA863EA0C5B2FD9640006BAD418E898C6BB64F62C2DF6F7A2BAE69C58/0/1EA7572730570E0D627708051828C84C8111A53E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1EA7572730570E0D627708051828C84C8111A53E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:a3:65:0c:55:b9:a7:20:ca:43:f8:a0:34:9f:ff:38:59:6e:b8:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1EA7572730570E0D627708051828C84C8111A53E
        Validity
            Not Before: Mar  5 17:41:16 2024 GMT
            Not After : Mar  4 17:46:16 2025 GMT
        Subject: CN=25E3F7C322328590351B62B678B861EC0BCAFB7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:d8:96:72:c0:d6:8a:bb:b0:56:b6:7b:9b:2f:
                    63:0f:7a:29:62:75:a3:a3:5e:db:b4:17:e0:66:3d:
                    92:34:10:30:4e:b1:17:ef:df:89:1f:52:a6:87:cc:
                    86:d4:40:d0:37:91:99:ec:75:21:71:5c:a8:73:c2:
                    1f:fa:e0:e9:f4:2f:99:a5:16:35:43:42:b4:52:b5:
                    0a:48:c3:5c:8e:51:0d:8e:af:4c:ef:51:37:5b:6b:
                    b9:cc:23:98:2e:40:4d:a0:62:69:f6:a9:d6:b8:4f:
                    d3:35:77:ec:d5:83:f6:3e:84:c8:4d:16:b8:54:57:
                    cd:29:7b:26:ec:30:5b:1e:ce:ad:e3:29:2b:6b:ab:
                    77:80:35:f0:ac:67:d2:85:8b:f5:9e:4d:8f:e4:fe:
                    c0:aa:13:d9:d7:7a:1a:66:71:2a:ef:e1:55:86:f7:
                    cb:1c:d0:a0:08:57:f7:c2:ac:41:06:28:4c:e6:16:
                    ca:e8:de:07:2c:96:b9:d5:19:6d:46:c5:61:55:9a:
                    17:d5:19:40:8a:d2:4e:6d:fe:40:71:60:40:57:d6:
                    55:85:ca:ed:b2:f7:36:0d:6f:dc:48:b5:ec:ee:45:
                    b0:3a:47:29:f5:10:50:e0:72:1d:24:18:50:88:fd:
                    c6:f5:26:d2:d1:65:89:7e:ed:ce:4d:ea:e1:37:c8:
                    f1:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:E3:F7:C3:22:32:85:90:35:1B:62:B6:78:B8:61:EC:0B:CA:FB:7B
            X509v3 Authority Key Identifier:
                keyid:1E:A7:57:27:30:57:0E:0D:62:77:08:05:18:28:C8:4C:81:11:A5:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/58F605DDA863EA0C5B2FD9640006BAD418E898C6BB64F62C2DF6F7A2BAE69C58/0/1EA7572730570E0D627708051828C84C8111A53E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1EA7572730570E0D627708051828C84C8111A53E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58F605DDA863EA0C5B2FD9640006BAD418E898C6BB64F62C2DF6F7A2BAE69C58/0/323830333a356265303a3130303a3a2f34302d3430203d3e20323731393033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5be0:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         63:fb:87:bc:1d:6c:67:7c:f9:55:cb:89:94:0b:3c:2e:de:11:
         b0:fd:88:a5:5d:2f:37:24:ac:2b:0b:88:47:9b:c4:b1:40:e1:
         6d:54:59:c0:51:ad:eb:73:e9:b5:c8:2f:64:ab:24:0c:c4:87:
         fc:3f:a9:09:1f:f7:5c:6e:cb:7c:1b:18:71:fa:f8:b1:76:d4:
         2b:df:68:a7:20:89:7f:2d:6f:f8:51:d5:e6:b3:94:a2:bd:f2:
         f1:3c:19:f3:c7:e8:10:c4:37:bf:45:90:57:cd:bf:10:74:07:
         13:85:f7:55:8b:d7:a5:e9:e2:98:d0:cb:4f:de:21:9b:87:ca:
         23:65:3a:85:56:c2:3b:c8:79:40:42:42:19:d9:37:a8:80:97:
         d3:2f:63:f0:08:99:2f:22:51:0a:17:2f:c3:6f:10:24:29:e1:
         02:5a:ca:86:9c:d6:df:67:1e:9d:c6:16:24:ae:d2:90:ed:54:
         ad:3e:5c:56:03:b8:15:f3:91:0d:f3:83:79:3f:0a:10:4f:ec:
         a5:51:d0:fc:69:5a:60:f3:35:72:e9:35:24:ab:1b:4e:85:d2:
         42:d8:33:90:3d:f8:f3:1c:67:d4:8e:c1:35:45:f2:10:3d:a6:
         d3:13:77:f6:9d:0e:22:5e:aa:46:42:1c:56:b5:6f:cc:a0:1d:
         93:9c:e3:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 22:25:42 2024 by rpki-client on console-fra.rpki-client.org